MAL-2025-183075 Malicious code in item-at-labigka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8adf8c58089d29307335b8e57d85b4be2f4f44eaaf028f5af171be49215e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182802 Malicious code in itale-adci-akonki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41101cc4bb27b925c7e8bc8298f124114284303203784f25f0fa169a88c37b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184935 Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gigimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cfae4fd70ba14e37c26847a3e7ced620dfde85ec4c07b93c808dc0cd9271cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789cac937e076f677b7735a8dc6fda5315492e94308cce9e77158faf65efdc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182477 Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182506 Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9079b408c8588105c56db9d5b6f660fd8dd844abd6ad448e4620f9c83670e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185126 Malicious code in sonic-kulig-tgacedcadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d728a93c50c2d84388357ece1548f950285905a9dde2c0911c49e1e06fb4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183842 Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184742 Malicious code in one-kat-fidulafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7cbb0c415d1ff5ee480d2779b40fb3f9b2c6fca3a57dd0911c4f94da747bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182925 Malicious code in itale-adci-hykaulaygg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ce7a4a863926396a7fc78a11d5d4ef2a15db676ba9429701d7b48a917ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb0d66cbb2c695b3d0c0a0dd4383ce96503cdcf8473262d9ce478efab9bc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d41b3d5644fab1ba36b595de637b58d7f2682208565b51a106deb961937b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbavuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b6cbe51e165e05248443dd811b1e6abede4597e8d8f377335754987c12df80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0d4f9694d7d6a19fa1bb1ec2f1ed97b2b73f3c6813e6a8ce6565440fa777d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761657e617e9706c970df5a5ec9e69a0eb56c083af3a7c6246fe0cf7e14524e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4a5e1cc8e53f27b4ee50de4c015afe45193fc5a85b89d56957b4b15eb81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...